Kaibutsunosato security breach

Kaibutsunosato is an application. A security vulnerability exists in Kaibutsunosato version v13.6.1, which stems from an information disclosure vulnerability in the client. An attacker can exploit the vulnerability to obtain a channel access token and send a crafted broadcast message...

CVE-2023-45357

Archer Platform 6.x before 6.13 P2 HF2 6.13.0.2.2 contains a sensitive information disclosure vulnerability. An authenticated attacker could potentially obtain access to sensitive information via a popup warning message. 6.14 6.14.0 is also a fixed release...

Archer Platform Security Vulnerability

Archer Platform is a modern integrated risk management solution from Archer, Inc. A security vulnerability exists in Archer Platform version 6.x prior to 6.13.0.2.2, which stems from the inclusion of a sensitive information disclosure vulnerability, where an authenticated attacker may be able to...

PT-2023-29529 · Rsa · Archer Platform

Name of the Vulnerable Software and Affected Versions: Archer Platform versions 6.x through 6.13 P2 HF1 Archer Platform version 6.13 P2 HF2 is not affected, but versions prior to 6.13 P2 HF2 are vulnerable. Description: The issue is a stored cross-site scripting XSS vulnerability. A remote...

CVE-2023-5554

Lack of TLS certificate verification in log transmission of a financial module within LINE client for iOS prior to 13.16.0...

PT-2025-45147

Name of the Vulnerable Software and Affected Versions Apple macOS versions prior to 13.5 Apple iOS versions prior to 16.6 Apple iPadOS versions prior to 16.6 Apple Safari versions prior to 16.6 WebKitGTK webkit2gtk in Debian Linux wpewebkit in Debian Linux webkit2gtk3 in SberLinux Description A...

CVE-2023-41731

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in I Thirteen Web Solution WordPress publish post email notification plugin = 1.0.2.2 versions...

Animal-art-lab Security Breach

animal-art-lab is an application. A security vulnerability exists in Animal-art-lab version v13.6.1, which stems from a vulnerability that allows an attacker to send a notification by revealing the access token of a channel...

CVE-2023-41658

CVE-2023-41658 affects the WordPress plugin “Photo Gallery Slideshow & Masonry Tiled Gallery” versions 1.0.13 (patches indicate 1.0.14 fixes) or disable the plugin as a workaround. No exploitation details or in-the-wild exploit status are provided in the supplied documents. Additional context fr...

PT-2023-28029 · WordPress · I Thirteen Web Solution Photo Gallery Slideshow & Masonry Tiled Gallery

Name of the Vulnerable Software and Affected Versions: I Thirteen Web Solution Photo Gallery Slideshow & Masonry Tiled Gallery plugin versions = 1.0.13 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts...

DEBIAN-CVE-2023-5217

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

Vulnerabilities fixed in Apple macOS

Apple has fixed vulnerabilities in Apple MacOS. A malicious party can exploit the vulnerabilities to launch attacks execute attacks that can lead to the following categories of damage: Denial-of-Service DoS. Circumvention of security measure Remote code execution Administrator/Root rights Remote...

PT-2023-27434 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.6.1 Description: The issue allows an attacker to access passkeys without authentication due to insufficient permissions checks. This has been addressed with additional permissions checks. Recommendations: For macOS...

PT-2023-27438 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.7 macOS Ventura versions prior to 13.6 macOS Sonoma versions prior to 14 Description: The issue allows an app to read arbitrary files due to inadequate checks. This has been addressed with improved checks...

CVE-2023-39041

An information leak in KUKURUDELI Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

Duplicate Advisory: EVE Doesn't Protect Rootfs

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-wc42-fcjp-v8vq. This link is maintained to preserve external references. Original Description In EVE OS, the “measured boot” mechanism prevents a compromised device from accessing the encrypted data located in t...

PT-2023-28892

Name of the Vulnerable Software and Affected Versions EVE OS versions 9.0.0 and earlier Description The "measured boot" mechanism in EVE OS is designed to prevent a compromised device from accessing the encrypted data located in the vault. However, this mechanism does not validate the entire...

CVE-2023-39039

An information leak in Camp Style Project Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

PT-2023-26748 · Unknown · Cheese Cafe Line

Name of the Vulnerable Software and Affected Versions: Cheese Cafe Line version 13.6.1 Description: An information leak in Cheese Cafe Line allows attackers to obtain the channel access token and send crafted messages. Recommendations: For version 13.6.1, consider restricting access to sensitive...

Cheese Cafe Line Security Breach

Cheese Cafe Line is a cafe management application from Cheese. A security vulnerability exists in Cheese Cafe Line version v13.6.1, which stems from the presence of an information disclosure vulnerability. An attacker can exploit the vulnerability to obtain a channel access token and send a...